Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft
File:                     khdBhFmoypIuDWajy6pAZyDLSJA.mft (raw, json)
Hash identifier:          0B5Xm4Bn8hESVjz5iZmXti2PY/bzRYzjbf1u4c599Ys=
Subject key identifier:   34:D8:A6:F4:8A:40:6C:E3:47:B9:42:03:F0:FE:D7:B7:28:D4:3C:63
Authority key identifier: 92:17:41:84:59:A8:CA:92:2E:0D:66:A3:CB:AA:40:67:20:CB:48:90
Certificate issuer:       /CN=A9137B39/serialNumber=9217418459A8CA922E0D66A3CBAA406720CB4890
Certificate serial:       049E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khdBhFmoypIuDWajy6pAZyDLSJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft
Manifest number:          0492
Signing time:             Tue 22 Sep 2026 23:40:41 +0000
Manifest this update:     Tue 22 Sep 2026 23:40:40 +0000
Manifest next update:     Tue 29 Sep 2026 23:40:40 +0000
Files and hashes:         1: khdBhFmoypIuDWajy6pAZyDLSJA.crl (hash: Jdl9t0Zxkm246gQCMHWjKC6M9uOJ8uD7cw7Hqzz1p6w=)
                          2: EA8F3FAE6F8611F0BA25F244C4F9AE02.roa (hash: I3945a68aAj4Bezh1bF6xRl/WpfQZcBM/2Xudp6szlE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.crl
                          rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khdBhFmoypIuDWajy6pAZyDLSJA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 23:40:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1182 (0x49e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137B39, serialNumber=9217418459A8CA922E0D66A3CBAA406720CB4890
        Validity
            Not Before: Sep 22 23:40:40 2026 GMT
            Not After : Sep 29 23:40:40 2026 GMT
        Subject: CN=6ab311f9-6847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ce:30:31:f1:76:c6:9b:ad:9d:0e:04:91:e9:
                    6d:d5:4b:3e:23:b1:6d:4b:6d:cc:df:11:83:9f:81:
                    71:5e:14:3c:f6:ed:04:d5:ec:3c:b8:b7:14:d9:04:
                    d2:73:24:20:24:72:0c:1c:64:e9:b0:09:46:cf:0c:
                    7c:b0:31:48:b4:4e:10:38:15:41:0e:a6:e9:a0:a4:
                    d4:44:89:fd:f7:9b:dc:83:3c:4f:8b:51:93:d4:c3:
                    5a:de:7a:5c:fd:fc:a7:64:88:0c:4f:a4:17:86:40:
                    c3:70:98:1b:76:03:94:80:db:fa:79:fb:b8:4a:bc:
                    4c:01:50:c8:7f:f7:2c:b0:3f:9f:2f:9a:0a:83:10:
                    f5:ad:c8:7f:af:c4:d1:40:c4:ec:99:d7:98:61:62:
                    65:dd:44:d1:47:aa:1e:d7:ef:c0:5e:53:fd:90:ca:
                    8f:3c:9f:27:f7:ad:34:92:87:7d:01:3e:03:e1:b1:
                    a9:b9:b5:e2:01:e6:9f:a6:c6:6d:d2:75:ac:25:55:
                    8a:e9:64:29:88:f6:a4:41:89:de:25:3e:89:15:e2:
                    a7:97:ea:24:5c:bc:aa:62:ae:35:83:77:5d:a2:c6:
                    aa:93:36:a0:0f:b6:6f:13:ff:94:c8:73:58:96:b1:
                    1d:06:ed:aa:65:b7:a0:79:fd:aa:a3:86:5a:02:2e:
                    f5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D8:A6:F4:8A:40:6C:E3:47:B9:42:03:F0:FE:D7:B7:28:D4:3C:63
            X509v3 Authority Key Identifier:
                keyid:92:17:41:84:59:A8:CA:92:2E:0D:66:A3:CB:AA:40:67:20:CB:48:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khdBhFmoypIuDWajy6pAZyDLSJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:f9:92:91:cd:e9:5a:9d:3b:f5:a3:a6:3a:5b:b1:56:f7:31:
         42:1b:e3:ff:bd:10:b0:33:c5:3e:51:78:4c:b9:85:82:29:1d:
         3f:c2:68:b9:9a:a9:19:15:33:61:fd:d5:79:68:0a:30:0d:0f:
         54:7d:4c:87:98:5d:0c:83:d6:96:3f:88:85:03:28:40:29:6f:
         f7:f3:70:db:7e:d5:33:9b:ba:5d:e1:c6:39:0b:15:56:6e:42:
         83:89:b2:ca:e8:06:19:60:c3:12:d1:0b:eb:ad:8a:da:98:04:
         91:6b:3c:d9:bd:34:c0:0f:0f:c4:f7:2c:11:c6:0a:86:0d:46:
         a7:7b:80:a2:44:e1:d9:92:7b:f1:0e:f5:61:f2:65:f7:02:e3:
         a4:f3:0b:cb:ae:ff:c0:b4:84:43:87:94:62:31:03:04:38:b5:
         50:2a:a2:33:ec:d3:1f:83:60:b8:1d:5a:a1:cb:a2:7b:e5:70:
         8d:3e:da:8d:3c:6b:a0:c7:b6:3b:52:33:1c:1b:1e:d7:68:f3:
         64:50:62:1d:46:01:c3:41:cf:90:c7:4f:2f:94:23:a4:7e:43:
         c4:d7:39:15:16:9c:0b:63:0c:8a:b2:90:12:d4:b4:1f:3f:1c:
         79:f4:d2:30:79:b5:bd:38:0e:bd:93:c9:8f:1c:22:ec:02:7f:
         4a:f9:e8:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdCMzkxMTAvBgNVBAUTKDkyMTc0MTg0NTlBOENBOTIyRTBENjZBM0NCQUE0MDY3
MjBDQjQ4OTAwHhcNMjYwOTIyMjM0MDQwWhcNMjYwOTI5MjM0MDQwWjAYMRYwFAYD
VQQDEw02YWIzMTFmOS02ODQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr84wMfF2xputnQ4Ekelt1Us+I7FtS23M3xGDn4FxXhQ89u0E1ew8uLcU2QTS
cyQgJHIMHGTpsAlGzwx8sDFItE4QOBVBDqbpoKTURIn995vcgzxPi1GT1MNa3npc
/fynZIgMT6QXhkDDcJgbdgOUgNv6efu4SrxMAVDIf/cssD+fL5oKgxD1rch/r8TR
QMTsmdeYYWJl3UTRR6oe1+/AXlP9kMqPPJ8n9600kod9AT4D4bGpubXiAeafpsZt
0nWsJVWK6WQpiPakQYneJT6JFeKnl+okXLyqYq41g3ddosaqkzagD7ZvE/+UyHNY
lrEdBu2qZbegef2qo4ZaAi71EQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDTYpvSK
QGzjR7lCA/D+17co1DxjMB8GA1UdIwQYMBaAFJIXQYRZqMqSLg1mo8uqQGcgy0iQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0IzOS9BNzU5OUQ3QUEw
MzUxMUVDODIyNTVEM0FDNEY5QUUwMi9raGRCaEZtb3lwSXVEV2FqeTZwQVp5RExT
SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2toZEJoRm1veXBJdURXYWp5NnBBWnlETFNKQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
N0IzOS9BNzU5OUQ3QUEwMzUxMUVDODIyNTVEM0FDNEY5QUUwMi9raGRCaEZtb3lw
SXVEV2FqeTZwQVp5RExTSkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIvmSkc3pWp079aOmOluxVvcxQhvj/70QsDPFPlF4TLmFgikdP8JouZqpGRUz
Yf3VeWgKMA0PVH1Mh5hdDIPWlj+IhQMoQClv9/Nw237VM5u6XeHGOQsVVm5Cg4my
yugGGWDDEtEL662K2pgEkWs82b00wA8PxPcsEcYKhg1Gp3uAokTh2ZJ78Q71YfJl
9wLjpPMLy67/wLSEQ4eUYjEDBDi1UCqiM+zTH4NguB1aocuie+VwjT7ajTxroMe2
O1IzHBse12jzZFBiHUYBw0HPkMdPL5QjpH5DxNc5FRacC2MMirKQEtS0Hz8cefTS
MHm1vTgOvZPJjxwi7AJ/Svno+A==
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:35:12 2026 by rpki-client